cancel
Showing results for 
Search instead for 
Did you mean: 

role should get provision without approver

0 Kudos

Hello all,

I have a requirement that I have a default role that should get auto provision without any approval process for contractor. We have HR triggers in PRODUCTION system but we cant use HR triggers for contractor since they are not in HR repository. Can anyone let me know how to change the MSMP or BRF+?

Accepted Solutions (0)

Answers (2)

Answers (2)

mhughes2
Participant
0 Kudos

Yashasvi,

For this user is it a manual request put in by Security or the Manager of the contractor? What workflow are you using to to initiate the MSMP process?

SAP_GRAC_ACCESS_REQUEST

SAP_GRAC_ACCESS_REQUEST_HR

or a custom BRF+ workflow?

former_member226273
Active Participant
0 Kudos

Hello Michael,

It will be manual request as there is no HR data for contractors.

The workflow SAP_GRAC_ACCESS_REQUEST will be used, the HR one is for HR objects, which is not needed here.

There might be a custom BRF+ workflow, but only Mohammed Feroz can confirm.

Kind regards,

Yashasvi

former_member226273
Active Participant
0 Kudos

Hello,

1. Upload the role in BRM without any approver

2. Set the role as default role based on Employee type (contractor)

3. Set parameter 2038 as YES

Please let me know in case of questions.

Kind regards,

Yasasvi

0 Kudos

I need to know the MSMP settings.

former_member226273
Active Participant
0 Kudos

No MSMP changes will be required in this case, I suppose you have Role owner stage, there the role without approver will get approved automatically. And based on your provisioning settings, role will be assigned at the end of request or end of path.

Former Member
0 Kudos

Hi Yasasvi,

2. Set the role as default role based on Employee type (contractor) - Think this is incorrect, we don't have attribute Employee Type for default role assignment.

Thanks

Ramesh

former_member226273
Active Participant
0 Kudos

Hello,

Apologies, yes there is no attribute as Employee type for default roles.

Please check if you can use any of the available attributes for configuring default role.

If not, please let us know.